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Abstract 



The paper describes an approach that may lead to a proof that 
the Birch and Swinnerton-Dyer conjecture fails. 
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1 Introduction 



Let P = {pi,P2, • • • \Pj is a prime, pj+\ > pj > 1, j > 1} be the 
set of all primes larger than one. An elliptic curve C over the 
field of rational numbers Q is a curve defined by the Weierstrass 
equation 

y 2 = x 3 + ax + b 

where a,b E Z and x, y E Q. The discriminant of the cubic 
equation is A = —16 (4a 3 — 27b 2 ) ^ 0. Let N p . denote the number 
of solutions to y 2 = x 3 + ax + b modpj and let a Pj = pj — N p . 
The incomplete L-series of the curve C is 

L(C,s)= n (I - a Pj p- s + p)- 2s )-\ (1) 

jeA c 

where 

= {j G IN, j > 0,j9 ? - does not divide A}. 

The Euler product (1) converges absolutely if Re(s) > | because 
it is known that \a p \ < 2p^. L(C, s) has a holomorphic continua- 
tion to the whole complex plane. The Birch and Swinnerton-Dyer 
conjecture is that the Taylor expansion of L(C, s) at s = 1 has 
the form 

L{C, s) = c(s — l) r + higher order terms 

with c ^ and r the rank of C. The rank of an elliptic curve 
is defined as the rank of the group of solutions in the rational 
numbers. The number r in the Taylor expansion of L(C, s) is 
called the algebraic rank of the curve. The conjecture is thus 
that the rank and the algebraic rank are equal. Information of 
the Birch and Swinnerton-Dyes conjecture can be found in [1]. 
Our notations are as in [2], in [1] N p is defined as one larger than 
in [2]. 

Let p > 2 be prime, Z p the cyclic group of integers modulo p, 
and Z* = {1, . . . ,p — 1}. The set of quadratic residues modulo p 
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is the set 

QR P = {x G Z*\3y G Z* such that y 2 = x (mod]?)} 
and the set of nonresidues modulo p is 

QNRp = {xeZ;\x<£QRp}. 
Let g be a primitive root of Z*, so 

^ = {sV,...,<T 2 }. 
The set QR P is the subset where g has even powers: 

QR p = {g\g\...}. 
Thus, QR P and QNR p have equally many elements: 
#QR P =#QNR P . 

2 Discussion of the conjecture and the main idea 

The main argument given in [1] why there should be a connection 
between the rank of C and the zeroes of L(C, s) is that more 
solutions in the rational numbers would in some way imply more 
solutions modulo p for many values of p. This argument is rather 
strange, since the group operation in Q that is used for deriving 
rational solutions: 

Xi+i = Sf - 2x l , y i+1 = yi + S,(x l+1 - x t ) 

5 < = — s — - 

22/» 

has a corresponding operation in integers modulo p in the form 

Xi+\ — Sf — 2xi (mod j?) 

S t = (s + 3x 2 )(2t i y 1 (modp) 
ti = x 3 + ax + b (mod j?). 
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That is, in rationals the operation is 

Vi+l = Vi + 2yiSi( x i+l ~ x i) + Sf(Xi+\ — Xi) 2 

= x\ + ax l + b + 2y l S l (xi+i - x l ) + S 2 {x i+ i - x l ) 2 
yielding 

x 2 + i + Xi+\Xi -\- x 2 -\- a = 2yiSi + {xi+i + 2x^)(xj-|-i — o^) 
which gives 

3x 2 + a = 2^5j. 

We can write a similar operation in Z p by replacing = by = 
(mod]?). If (xi,yi) is a solution in Z* then this operation in Z p 
gives another solution (a^+i, yi+i), 2^+1,^+1 G Z* where 

Vi+i = U+i (mod]?). 

The operation also takes a pair (a^, ^) where ^ G QNR p into a 
pair tj+i) where U+\ G QNR P . Iterating the operation gives 
classes of pairs (x{, yi). What can be said is that if there is a solu- 
tion in Q, then all of the iterated solutions map to the same set of 
(xi, yi) in Z p . This is not much knowledge since there may be sets 
of (xi, yi) in Z p that do not correspond to any solutions in the 
rational numbers. Several sets of solutions in Q may map to the 
same set of solutions in Z p . Especially, it is difficult to say why the 
number N p of solutions in Z p should be growing if there are more 
solutions in Q. There are similar problems, for instance integer 
knapsack problems, where the corresponding modular problem 
practically always has many solutions and nothing can be con- 
cluded from the number of solutions in integers by counting the 
solutions modulo primes. 

It might appear that Hasse's bound \a p \ < 2p^ could be inter- 
preted to mean that there are at most y/p integer solutions since 
there are yjp squares that are smaller than p and every integer 
solution is naturally also a solution modulo p. There would be p 
solutions that do not indicate existence of integer solutions but 
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if there are more solution, it would mean integer solutions. Inte- 
ger solutions would be in some way related to rational solutions. 
However, this kind of reasoning is totally wrong. If — 1 G QNR p , 
then a p = by Lemma 1. The rational solutions do not in any 
way show up in computation of values a p . It is difficult to see 
why they should. Thus, simple logical reasons do not provide 
enough support to the conjecture. If the conjecture holds it holds 
for some unclear reason. Let us look at some other arguments in 
favor of the conjecture. 

Birch and Swinnerton-Dyer made numerical computations with 
the same type of curves which are analysed in Lemmas 1 and 
3 and their computations showed a plausible relation that they 
formulated as the conjecture. Plots of the numeric computations 
are reproduced in [1]. They show five values of d corresponding 
to ranks to 4, and are stated in [1] to be the original data of 
Birch and Swinnerton-Dyer. The primes in their computations 
are smaller than 10 7 and do not necessarily show the correct as- 
sumptotic growth, but even if they do in the studied cases, this 
data is quite small. Some numerical computations are not neces- 
sarily supporting the conjecture. In [1] it is noted that no elliptic 
curve has been proved to have algebraic rank r three or higher, 
while r = 0, 1, 2 have been produced. There are elliptic curves 
of much higher rank, so the failure to show that the algebraic 
rank can have higher values may be an indication that there is 
no direct connection between these ranks. Several large numeri- 
cal computations of algebraic ranks have been made and they all 
show very few cases of algebraic ranks higher than 4 or 5. Thus, 
numerical results are not clear. Let us look at theoretical results. 

There are proved theorems stating the following: If L(C, s) is zero 
at s = 1 but the derivative of L(C.s) is not zero at s = 1 then the 
rank of C is one. If the rank of C is one and C is a modular curve 
then L(C, s) has a zero at s = 1. Andrew Wiles in [2] draws the 
conclusion that since all elliptic curves are modular, then if the 
rank of C is one, L(C, s) has a zero at S = 1. These theoretical 
results do not necessarily indicate that the whole conjecture is 
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true. There may very well be some indirect connection for small 
values of the rank of an elliptic curve. For instance, for an elliptic 
curve of the simple form y 2 = x 3 — d 2 x we can show that if the 
Birch and Swinnerton-Dyer conjecture holds for d = 1 then it 
holds for every d that is a square. There may be many special 
cases where the conjecture holds. 

The approach of this paper may lead to a counterexample to the 
Birch and Swinnerton-Dyer conjecture. If no counterexample is 
obtained, the approach adds supportive evidence and insight to 
the conjecture but does not directly prove it. The paper contains 
lemmas that give exact expressions for the numbers N p for a 
simple set of elliptic curves. Lemmas 1 and 3 show that there 
are only two values a p for each p for elliptic curves of this type. 
Let us assume that for two different values of d, say d\ and di, 
we find solutions (x, y\) and (x, y 2 ) in rational numbers. That 
is, the value x is the same. Let the corresponding elliptic curves 
be C\ and Ci- For each p the corresponding modular equation 
gives a congruence where y 2 maps to a quadratic residue. The 
two possible values of a p correspond to two sets of solutions that 
satisfy the condition: if in one set x gives a quadratic resudue 
as t\ = x 3 — d 2 x (mod]?), then in the other set t\ is quadratic 
nonresidue. Now x gives a quadratic residue in both sets for every 
value p. Thus, all numbers a p are equal. Then the function 

L(C u s)L(C 2 ,s)- 1 

converges for s = 1 and thus the multiplicity of the zeroes of 
L(Ci,s) is the same as multiplicity of the zeroes of L(C2,s). If 
we can find C\ and C 2 that have different rank, then the Birch 
and Swinnerton-Dyer conjecture fails. By the construction, both 
curves have rank at least one, but there are elliptic curves with 
higher ranks. If there is no reason for the conjecture to be true, 
this method should find a counterexample provided we can find 
out the ranks of the tested curves. Let us now proceed with this 
idea. 



7 



3 Some lemmas for numbers N p 



Let us start by solving the numbers N p for a simple case of elliptic 
curves. 

Lemma 1. Let p > 2 be prime and a an integer. Let QR P 
denote the set of quadratic residues modulo p and QNR p denote 
the set of quadratic nonresidues modulo p, and let — 1 G QNR p 
and a ^ (modp). The number N p of solutions to the modular 
equation 

y 2 = x 3 + ax (modp) (2) 

is N p = p. 
Proof: Let 

A = {x G Z* p \ti G QRp, ti = x(x 2 + a) (modp)}, 

B = {x G Z*\ti G QNRp, ti = x(x 2 + a) (modp)}, 
and mi =#A, =#B. We can write 

Ai = {x = 1, . . . , — — — |^i G Qi?p, ti = x(x 2 + a) (modp)}, 



p + 1 

^2 = {x = — - — , • • • ,p - 1 |*i G Q-Rp, *i = ^(^ 2 + a) (modp)}, 

5i = {x = 1, . . . , \t x G QiVflp, h = x{x 2 + a) (modp)}, 
p + 1 

^2 = = — - — , • • • ,P - 1 |*i G QNRp, t\ — x(x 2 + a) (modp)}, 

and m^j =#Ai, m2 ) j =#Bi, i = 1,2. The sets ^ and ^4 2 are 
disjoint and ^4 = U Similarly, the sets 5i and £>2 are 
disjoint and B = B\U B2. Because — 1 G QNR p 

p + 1 

^2 = {—x = — , . . . , —p—\\t\ G QRp, t\ — x{x 2 +a) (modp)}, 

p + 1 

= {- x = p — ,...,p-p + l|^ G QRp, 

t[ = p — t\ = (—x)((—x) 2 + a) (modp)}, 
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= {-x = 1, . . . G QR P ,t[ - (-x)((-x) 2 + a) (mod;?)}, 

= {V = 1, . . . , ^-Vi G QiVflp, = x(x /2 + a) (modp)} = B x . 
Similarly, A\ = £> 2 . It follows that 

mi = mi,i + mi j2 = m M + m 2 ,i, 

m 2 = m 2 ,i + m 2j2 = m 2ji + m^i. 

Thus, mi = m 2 . Let a G Then there are two values x G Z * 

that yield t\ = (mod]?). Therefore 

P — 3 

mi + m 2 = p — 6 =4> mi = . 

Every x E A yields two solutions y,p — y to (2). Every x giving 
ti = (modj^) yields one solution y = to (2). The number of 
solutions is 

flp = 2^ + 3=p. 
If a G QNR p then mi + m 2 = — 1 and 

AT p = 2^ + l=p. 
The lemma is proved. □ 

Lemma 2. Let p > 2 be prime and d > an integer. Let QR P 
denote the set of quadratic residues modulo p and QNR p denote 
the set of quadratic nonresidues modulo p, and let —1 G QR p . 
The number of solutions y 2 to the equation 

y 2 — 1 = x 2 (modp) (3) 

satisfying y 2 ,x 2 G Z* is 

Proof. For brevity, we write y = x as a shorthand of y = x (mod p) . 
Let us assume that (3) holds. Thus there exists z G Z * such that 

y 2 -x 2 = (y-x)(y + x) - 1 
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can be written as 



y — x=z,y+x=z . 

Then 

y ee 2~\z + z~ l ) , x = 2~\z - z~ l ). 

Let ±e denote the two roots of z 2 = — 1. If z = ±e then y ee 0. If 
2 ee ±1 then x ee 0. Two values z and are nonequal if z ee ±1. 
We discard the four values z G {±1, ±e} and let z range over Z*. 
This gives all possible values for y and the number of different 
y is then p ~j,~ 4 . The number of different ?/ 2 is then since ±?/ 
yield the same y 2 . Notice that as — 1 G QR P , E ^ is an integer. 
This is because both y and — y belong to QR P or both of them 
belong to QNR p . The number of y in QR P equals the number of 
y in QNR p . Thus, ^ is divisible by 2. The lemma is proved . □ 

Lemma 3. Let p > 2 be prime and d > an integer. Let QR P 
denote the set of quadratic residues modulo p and QNR P denote 
the set of quadratic nonresidues modulo p, and let —1 G QR P 
and d ee (modp). The number N p of solutions to the modular 
equation 

y 2 ee x 3 — d 2 x (mod]?) (4) 

is 

N p = 8ni + 7 if d G QR P , 
N p = -8ni + 2j9 - 7 if d G QiVi^, 
where n\ is the number of solutions y 4 G Z* yielding y 4 — 1 G 

Proof: Let 

B = {iG G QR p ,h = x 3 - d 2 x (modp)}. 

We change x' = d~ l x (modp), t[ = d~H\ {modp). Let 
A = {x G Z*^ G QR p ,t\ ee rc' 3 - x (modp)}. 
A' = {x' G Z*\t[ G QNRp, t[ ee x' 3 - x' (modp)}. 
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If d e QR P then B = A. If d € QNR P then B = A'. Let g be a 
primitive root of Z*. Let us write the sets A and A' differently 

A = {g k (g 2k -l)eQR p \k = 0,...,p-2}, 

A' = {g h (g 2k - 1) e QNR p \k = 0, ... ,p - 2}, 

Ai = {g 2k (g 4k - 1) e = 0, . . . , 

4 = {<? 2 V fc - 1) e QA^# = 0, . . . , 
^ = V (2fc+1) -i)^W = o,., 
4 = V (2fc+1) - i) e QA^# = o, . . . , ^}. 

Then A = A 1 U A 2 . We write 

^ = {^-^^# = 0,...,^}, 

C' = {g 2k -l€QNR p \k = 0,...,^-}, 
C 1 = {g 4k -leQR p \k = 0,...,^}, 
C[ = {g 4k -leQNR p \k = 0,...,^}, 
C 2 = {g ^-ieQR p \k = 0,...^l 

C > = {g^-leQNR p \k = 0,...^}. 

Then C = Ci U C<i- The following relations hold 

#A =#2d+#2C 2 , 
#A' =#2CI+#2C 2 , 
#C 2 =#C-#Ci, 

#c 2 =#c"-#c;, 

In the last relation we have excluded the case ?/ 2 — 1 = (modp) 
because U QNR p . Thus, we must subtract one from the 
total sum ^ of values g 2k . This gives ^ — 1 = Also holds 

#C[ = ^-#Ci. 
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Here we have excluded the case y 2 — 1 = (modp) because 
QR P U QNRp. We subtract one from the total sum ^ of 
values g Ak . This gives ^ — 1 = 2=^. Solving #^4 yields 

#A = 2#Ci + 2#CJ 

= 2#ci + 2#c - 2#c; 

= 2#Ci + p - 3 - 2#C - ^ + 2#Ci 
= 4#Ci-2#C + ^. 

Inserting #C = from Lemma 2 yields 

#A = 4#Ci - ^ + 2=1 

#A = 4#Ci + 2. 

There are two solutions ±y for each t\ G ^4 or A' and there is one 
solution y = (modp) for each of the three values x = (modp) 
or (±x) 2 ee 1 (modp). Thus 7V p = 2#A + 3 if d G Qi2p. Let us 
denote #Ci by ni as in the claim. We have 

N p = 8m + 7 if d G gi2p. 

Similarly we can compute #^4/: 

#A' = 2#C[ + 2#C 2 
= p -f - 2#Ci + 2#C - 2#Ci 
= -4#Ci + ^ + ^ - 2 
= — 4ni + p — 5. 

We have 7V P = 2#A' + 3 if d G QiVflp. Thus 

jV p = _8m + 2p - 7 if d G QiVflp. 

The proof of the lemma is completed. □ 

Lemma 4. Let p > 2 be prime and d > an integer. Let QR P 
denote the set of quadratic residues modulo p and QNR p denote 
the set of quadratic nonresidues modulo p, and let —1 G QR p . 
Then y A — 1 G QR P is equivalent with the condition that there 
exists r G Z* such that 2y 2 = r + r^ 1 (modp). 

Proof: For brevity, we write y = x as a shorthand of y = x (modp) . 



12 



If 2y 2 = r + r 1 then 

y A - 1 = (2"V + 2-V- 1 ) 2 - 1 ee (2"V - 2- l r- l f G Ql? p . 

If y* 4 — 1 G there exists s e Z* such that y 4 - 1 = s 2 . Then 
(y- 2 — s) (y 2 + s) ee 1 and there exists r G Z '* such that 

2 2 —1 

y + s = r ,y — s = r . 
Thus, 2y 2 ee r + r _1 . The lemma is proved . □ 

Lemma 5. Let p > 2 be prime and d > an integer. Let QR P 
denote the set of quadratic residues modulo p and QNR p denote 
the set of quadratic nonresidues modulo p, and let —1 G QR P , 
2 G QNR p , and e G QR P where e 2 ee — 1 (modp), The number of 
solutions y A yielding y A — 1 G QR p . is E ^-. 

Proof. For brevity, we write y = x as a shorthand of y = x (mod p) 
Let y A — 1 G By Lemma 4 there exists r G Z* such that 

z/ 4 — 1 ee (2 _1 r - 2-V- 1 ) 2 , 2y 2 = r + r -1 . 

Let us count the number of solutions y to y A — 1 G by 
counting the values of r. We must discard four values of r. Two 
values, r = ±1 yield y A — 1 = ^ QR P . Two values r ee ±e yield 
2y< 2 ee 0. Two values r and r _1 map to the same y 2 but there are 
also two values ±y that map to the same y 2 . The total number of 
values of r is thus p— 1 — 4. Let n values yield 2~ 1 (r + r~ 1 ) G 
Then n is the value of y G Z* yielding / - 1 G It follows 

that the number of y G Z* yielding y A — 1 G QNR p is p — b — n. 
Because e G there 3m G Z* such that m 2 ee e. There is a 
one-to-one and onto mapping from the solutions 

4 1 _ 2 

y 1 — 1 = X 

to the solutions of 

y 4 + 1 ee x 2 

defined by 

y 4 -l = x 2 
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mapped to 

(my) + 1 = (ex) 2 . 

This means that the number of y G Z* yielding y 4 + 1 G QNR p 
is 

p — 5 — n. (5) 

By Lemma 2 the number of y 2 yielding y 2 — 1 G is Thus, 
the number of y yielding y 2 — 1 G is If 2/ £ there 
exists yi G Z* such that ?/ 2 = y. This ?/i may be in QR P or in 
QNRp. Therefore the number of such values y\ is n. The number 
of values y is consequently |. It is an integer. In fact, n must be 
divisible by 4 since there are four roots to y 4 — 1 = x 2 . This gives 
the number of y G QNR p that yield y 2 — 1 G as 

j9 — 5 n 
~~ 2 2' 

Let 2 G QNR p . By Lemma 4, ?/ 4 - 1 G 3r G Z* such that 

2y 2 = r + r _1 . Let us assume r G Then 3rx G Z* such that 

r = r\. It follows that 

2y 2 rJ ErJ + lG QNRp. 

The number ri can be in QR P or in QNR p . By (5) the number of 
such T\ is j9 — 5 — n, so the number of r is v ~ h ~ n since two values 
±ri yield the same r. Next, let us assume r G QNR p . We are 
still assuming 2 G QNR p . So 2r G and 

2n/ 2 = r 2 + 1 G QR P . 

By Lemma 2 the number of solutions r yielding r 2 — 1 G 
is There is a one-to-one and onto mapping r 2 — 1 = x 2 
to (er) 2 + 1 = (ex) 2 . Thus, the number of solutions r yielding 
r 2 + l G QRp is ^y-. If r G QR P , we get a solution to r\ + l G 
for r\ = r and the number of such T\ is n meaning | values of 
r. We get the number of solutions r such that r G QNR P and 
r 2 + 1 G as p ~^~ n . The number n of solutions yielding 

/-lG is the sum of solutions for r G QR P and r G QNR p . 
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Thus, 

p — 5 — n p — 5 — n 

n = 1 . 

2 2 

Solving n gives 

p — 5 

n = . 

2 

The number of y 4 yielding y A — 1 G is 

J9 — 5 



ni = 
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This number must be an integer under the assumption that e G 
QR P . The lemma is proved . □ 

It may be that the case of Lemma 5 cannot occur, but the author 
does not know any argument why this should be so. Numerical 
trials did not show any case where 2 G QNR p , — 1 G QR P and 
e G QR P . 

Lemma 6. Let p > 2 be prime and d > an integer. Let QR P 
denote the set of quadratic residues modulo p and QNR p denote 
the set of quadratic nonresidues modulo p, and let —1 G QR P 
and e G QNR p where e 2 = — 1 (modp), Let n\ be the number of 
solutions y A to the equation 

y A — 1 = x 2 (modp) 

such that y 4 ,x 2 G Z*. Let be the number of solutions y A to 
the equation 

y A + 1 = x 2 (mod p) 
such that y A , x 2 G Z*. The numbers n\ and ri2 satisfy the equation 

p — 5 

n\ + n 2 = — - — . 



Proof. For brevity, we write y = x as a shorthand of y = x (mod p) . 
Since —1 G QR P there exists e G Z '* such that (±e) 2 = —1. Mul- 
tiplying 

y 2 - 1 = x 2 
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by —1 gives 

(ey) 2 + 1 = (ex) 2 . 

This shows that there is a one-to-one and onto mapping between 
the solutions y 2 toy 2 — l G QR P and y' 2 to y ,2j rl G QR p . It is onto 
because every y\ G QNR p can be expressed as y\ = ey 2 for some 
y. This follows directly by expressing y\ = g k and e = g> where g 
is a primitive root of Z*. Then j and k are odd and j/ie 1 = g k ~i is 

a square y 2 for y = g 1 ^ - . By Lemma 2 the number of the solutions 
y 2 is ^p. Thus, the number of solutions y to y 2 +1 G is ^t^. 
Multiplying 

?/ 4 - 1 EE X 2 

by —1 gives 

(ey 2 ) 2 + 1 ee (ex) 2 . 

We assume that e G QNR p , thus q/ 2 G QNR p . This shows that 
there is a one-to-one and onto mapping between the solutions y 2 
yielding y 4 — 1 G QR P and solutions y G QNR p yielding y 2 + 1 G 
The number of solutions y yielding y A — 1 G is denoted 
by rii, thus the number of y 2 yielding y A — 1 G is 2ni. The 
number of solutions y yielding y 4j rl G QR P is denoted by ri2, thus 
the number of y 2 yielding y A + 1 G is 2n2- The number of 
solutions y yielding y 2 + 1 G is The number of solutions 
y G yielding y 2 + 1 G is the number of ?/ 2 yielding 

y A + 1 G Q-Rp, i.e., 2n2- Thus the number of y G QNR p yielding 
y 2 + 1 G is 

— 2n 2 . 



We get the equation 



p — 5 
2ni = — 2n2- 



The lemma is proved . □ 

No exact formula for n\ was obtained for this special case — 1 G 
QR P and e G QNR p . There is variation that is difficult to express 
precisely. For instance, with p = 13 we get ni = 2 and ni = 0. We 
can use the following lemma to show that these unknown numbers 
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ri\ and ri2 cancel in the product of two L-functions L(C\, s) and 
L(C2, s) for the curves C\ and C2 as in Lemma 7. Notice, that m 
and ri2 are not equal. What cancels in the following theorem is 
that one curve has N p = p + m and the other have N p = p — m 
for some m. The offset m depends on m but it is not directly 
possible to obtain m because of this cancellation combined with 
the result of Lemma 6. In fact, for C2 we would not get the result 
in Lemma 3, but the following result: The number N p of solutions 
to the modular equation 

y 2 = x 3 + d 2 x (modp) 

is 

N p = 8m + 3 if d e QR P , 

N p = -8m + 2p - 3 if d G QNRp, 

where m is the number of solutions y A G Z* yielding y Aj rl G QR p . 
This is because four solutions are not possible for Ci- 

Lemma 7. Let C\ and C2 have the Weierstrass forms 

d : y 2 = x 3 - d 2 x 

C 2 : y 2 = x 3 + d 2 x. 

Then a Pj i + a p ^ = for every p such that — 1 G QR P and e G 
QNRp. ' 

Proof: By the assumption — 1 G QR P and e G QNR p . There is a 
mapping t\ = x 3 — d 2 x to t\ = x 3 + d r2 x by substituting d' = ed. 
Then we change x' = d'~ l x (modjy), t[ = d'~ 3 t\ (modj?) as in the 
beginning of Lemma 3. We notice that the value d to be tested is 
different for the curves C\ and Ci- For C2 we must test if d' = ed 
is in QR P or QNR P while for C\ we test if d is in QR P or QNR P . 
There are only two values for N p from any d 2 and they are always 

N p = p + m if d E QR P , 

N p = p-mif de QNRp 
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for some m as is shown by Lemma 3. Because e G QNR p we get 
N p = V + m f° r Ci an d -/Vp = p — m for C2. They sum to 2p and 
always 

Op,l + Op,2 = 0. 

Lemma 7 is proved. □ 

Lemma 8. The proportion of primes for which is even 
approaches half when p grows. 

Proof. This is seen by considering the Sieve of Eratosthenes. In 
this algorithm primes are found by reserving a memory vector 
for all numbers and marking all places empty at the beginning. 
Starting from 2 the first empty place is taken as a prime and it 
is marked. Then all multiples of this number are also marked. 
As a prime p greater than 2 has no common divisor with 4, the 
marked numbers are equally distributed modulo p' or p' 2 for any 
other prime p'. The next prime p is always the first empty place 
and thus p — 1 is equally often divisible by 4 or not. (Naturally 
p — 1 is divisable by 2.) □ 



4 Some lemmas for rational solutions 

Lemma 9 is known for ages, but let us give it for completeness. 

Lemma 9. Let c 2 = a 2 + b 2 , a, b, c G Z, then 3h, m, e G IN such 
that 

a = ±hem , b = ±^h(m 2 - e 2 ) , c = ±^h(m 2 + e 2 ). 

Proof: Without loss of generality we can assume that a, 6, c G N. 
We can write c 2 — b 2 = (c— 6)(c+6) = a 2 . Let h = gcd(c+b, c—b). 
Then there exists m and e, m > e, gcd(m, e) = 1, such that 
c + b = hm 2 , c — b = he 2 . The claim follows. □ 
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Lemma 10. Let d G Z , d > 0. Rational solutions (x, y) with 
x ^0,y^0to 

y 2 = x 3 - d 2 x (6) 

are of the form 

/ \ ( i m + e > n T, ^ 7 m + e\ 

(x h yi) = [d , ±2Wd— = , 

\ m — e \ m L — e l m — e) 



i m — e / em m — e\ 

(^2, 2/2) = « — , ±^\ d— 2 2" , — ' 

V m + e V m A — e A m + ej 

where e,m E N , m > e, gcd(m, e) = satisfy 

d=(A) J I^. (7) 
V 2j / em 



Proof. Let 1,1/GQ, i^0,?//0. Let us write 0? = ^ + 1 G Q, 
/? = ^ G Q. Solving (6) for x and solving x from the definition of 
a yields 

(3 2 a 



x 



2a — a 2 a — 1 



Writing j3 = | for some GiV gives 



k 2 J(2df) 2 + (k 2 y 

j 2 2d j 2 2d 



As y 7^ 0, /c 7^ 0. By Lemma 9, 0^2 G Q if and only if there exist 
h,e,m G A/", gcd(e, m) = 1, m > e, such that 

A: 2 = hem , 2c?j 2 = ^h(m 2 - e 2 ) , c = ^h(m 2 + e 2 ). 

If em = 0, then = and y = 0. This solution gives j = 2<ij 2 



2df 
2dy 



a li2 = 1 ± 7^ = 1 ± 1 , cki = 2, a 2 = 0, 



d 7 

xi = = a , X2 = —a , y = 

a — 1 
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but we have excluded this case in the assumptions. Since em ^ 0, 

j 2 

let us write h = — . Eliminating h yields 

P1TI O J 



_ ( k \ 2 m 2 - e 2 
V 2j / em 

k 2 

/ 2 2\ 

c = — (m + e ). 



Simplifying a^yields 



i.e. 



ai ;2 = — ^ — 2 ( m2 - e 2 - 2em ± ( m2 + e 2 )) > 



2m 2e 

«1 = ; , «2 



m + e m — e 

d m + e m — e 

x\ = = a , X2 = —d 

oil — 1 m — e m + e 

2 



This gives the claim. □ 



em 



j y m 2 — e 2 



From (7) it is clear that if d is a square, there are no rational 
solutions to (7). There are the three solutions (0, 0), (d, 0), (—d, 0) 
to (6), so the number of rational solutions of (6) is finite. Because 
d is a square d G QR P for every p and because L(Ci, 1) is finite 
and nonzero for d = 1, it follows that for every such d L(Ci, 1) 
is finite and nonzero. That is, the Birch and Swinnerton-Dyer 
conjecture is true for square values of d. In the next lemma we 
give a set of values d such that (6) has no rational solutions, i.e., 
the elliptic curve has only finitely many rational solutions, but d 
is not always in QR p . Then it is not obviously true that the Birch 
and Swinnerton-Dyer conjecture holds. 



Lemma 11. Let d > 2 be a prime such that — 1 <G QNRd 
and 2 £ QNRd. The equation (7) in Lemma 10 has no solutions 
k,j, m, e G IN where gcd(m, e) = 1, m > e > 0. 
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Proof. We write (7) with mi, e\ 



d= fk\ 2 ml-el 
\2j) eimi 



and convert it into the form 

d=l- 



k\ 2 st 



\j J m 2 — e 2 

by the substitution mi = m + e, ei = m — e, i.e., 2m = mi + ei, 
2e = mi — ei. We can divide m, e and m 2 — e 2 by gcd(m, e), thus 
let us assume that gcd(m,e) = 1. Since d > 0, we can assume 
m > e > 0. Let us write 

j 2 (m + e)(m — e)d = k 2 me. (8) 

Since gcd(m, e) = 1 it follows that gcd(m ± e, m) = 1. Indeed, if 
m ± e = cir, m = C2r for some r, ci, C2 G IN, then 

c\C2r = C2m ± C2e = Cim ^> {c\ — C2)m = ±C2e 

^> m|c2 =4> 3a G IN such that C2 = am 
=4> m = amr =^ar = l=>r = l. 
Similarly, gcd(m ± e, e) = 1. We have 

gcd(m + e, m — e) = 1 or 2 

since let m + e = c' x r, m — e = c' 2 r for some c' l5 c 2 , r G IN. Then 
2m = (ci + c' 2 )r, 2e = (c[ - c' 2 )r. As gcd(2m, 2e) = 2 > r, it 
follows that r = 1 or r = 2. We write (8) as 

j 2 r 2 cic 2 = fc 2 me 

where gcd{r 2 d 1 d 2 ^'me) = gcd(m 2 — e 2 , em) = 1. It follows that 
<i|me and that medr x = j 2 is a square. As d is prime, there are 
only two possibilities: 

m = s 2 d , e = t 2 or m = s 2 , e = £ 2 <i 
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where s,t > and gcd(s,t) = 1 because gcd(m,e) = 1. Then 
r 2 c[c 2 = k 2 and gcd{d x , c' 2 ) = 1 or 2. There are only two possibil- 
ities 

rc[ = c 2 , rc 2 = c 2 or rc^ = 2c 2 , rc 2 = 2c 2 , 
for some ci, c 2 G IN. We have four cases in total. 

Case 1. m = s 2 d, e = t 2 , rc[ = c 2 , rc 2 = c 2 . Then m + e = c 2 
m — e = c 2 give 

s 2 d + t 2 = c? , s 2 d-t 2 = c\. 

The latter equation yields —1 = fat^ 1 ) 2 (modcf) which is impos- 
sible since — 1 G QNR^. 

Case 2. m = s 2 cf e = £ 2 , rc^ = 2c 2 , rc' 2 = 2c 2 . Then m + e = 2c 2 
m — e = 2c 2 give 

s 2 d + t 2 = 2c\ , s 2 d-t 2 = 2c 2 .. 

Multiplying the modular equations 

t 2 - 2c\ (modcf) , -t 2 - 2c 2 (modcf) 

yields —1 = (2ciC2^~ 2 ) 2 (modcf) which is impossible since — 1 G 
QNR d . 

Case 3. m = s 2 , e = £ 2 cZ, rc^ = c 2 , rc 2 = c 2 . Then m + e = c 2 
m — e = c 2 give 

s 2 +t 2 d = c 2 , s 2 - £ 2 c/ = c 2 . 

Thus 

2 S 2 = c 2 + c 2 2 

so 

4s 2 = c\ + 2cic 2 + c 2 + c{ - 2dc 2 + c\ 
(2s) 2 = ( Cl + c 2 ) 2 + ( Cl -c 2 ) 2 . 
It follows that 3h', e 1 , m' G IN, gcd(m', e') = 1 such that 

ci + c 2 = h'e'm! , ci — c 2 = \U{m 2 — e 2 ), 
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2 S = ^ , (m ,2 + e /2 ). 

Solving ci,C2,s yields 

ci = ^ti(2e'm' + m' 2 - e /2 ), 

c 2 = hi\2e , m! + e /2 - m' 2 ), 
4 

Since 

2^ 2 c? = c 2 - c\ = (ci - c 2 )(ci + c 2 ) 

we get 

4 

As o? is prime and gcd(e' , m') = 1 it follows that 2 = // is needed 
to compensate for the term |. With the single terms e'm' there 
are only the following possibilities since m' > e', either 

m' = d,e' = l ^l = d 2 -l^d 2 = 2. 

or 

e'm' = 1, m'2 - e' 2 = d =^> m' = e' = 1 => d = 0. 
In both cases we have a contradiction. 

Case 4. m = s 2 , e = £ 2 d, rc' : = 2c 2 , rc' 2 = 2c 2 ,. Then m + e = c\ 
m — e = c 2 give 

s 2 + t 2 d = 2c\ , s 2 - t 2 d = 2c 2 2 . 

Thus 

s 2 = c\ + c 2 , , eft 2 = c 2 - c 2 , = (ci - c 2 )(ci + c 2 ). 
Let us notice that m + e = 2c 2 and 

gcd(m + e, e) = 1 =^> gcd(c\,t) = 1, 
gcd(m — e, e) = 1 =4> gcd(c 2 , £) = 1. 
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If c\ + C2 = ctit, C\ — C2 = ot^t for some cki, G IN, then 



Thus, <it 2 = c\ — c\ = axait 1 . It follows that d = a\a^ and as d 
is prime and necessarily ol\ > ot^ it follows that ol\ = d, ol<i = 1. 
Then ci = d + 1 and C2 = d — 1. Consequently s 2 = c 2 + c 2 , = 
2(d 2 — 1) is even, so m is even. Since s 2 + dt 2 = 2c 2 it would follow 
that t is also even as d is odd. Then gcd(m, e) 7^ 1, which is a 
contradiction. It is necessary in Case 4 that m and e are both 



2ci = (ai + 0:2)^ =4> £ = 2, ci = ai + a% 



2c2 = («i — 0:2) £ =4> t = 2, ci = ai — Oi2- 



odd. 



Thus, either 





t |ci + c 2 =^> ci - c 2 |d =^> ci - c 2 



d => t = Ci + C2 



or 



t 2 |ci - C 2 Ci + c 2 |d Ci + c 2 



d ^ t 2 = Ci — C2- 



In the first case 



2ci = £ 2 + d > , 2c 2 = t 2 - d > 0. 



In the second case 



2ci = d + £ 2 > , 2c 2 = d - t 2 > 0. 



In both cases we can derive in a similar way: 




Thus 



4d = ti{{m' + e') 2 -2e' 2 ) 
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i.e., as h! ^ (modd) 

2= (m /2 + e' 2 fe'- 2 (modd) 
which is a contradiction since 2 G QNRd- Lemma 11 is proved. □ 

5 Finding a contradiction 

We have to look for two solutions (x, y\) and (x, 1)2) for two dif- 
ferent values d\ and d^ in Lemma 10. Clearly, from (7) follows 
that di, i = 1,2, can be selected to have the form 

d l = e l m l {m\ - e 2 ). 

Let us for simplicity take the solutions of the type (xi,yi) in 

Lemma 10. We also could take the other solution (x2, 2/2) in 
Lemma 10 in case this choice does not work. Then 

. mi + ei . m 2 + e 2 

X = di = tt2 • 

mi — ei ?7i2 - e2 

Inserting ^ yields 

e\m\{m\ + ei) 2 = e2m 2 (m 2 + e 2 ) 2 

from which we can solve 7772 and try to find solutions. If solutions 
are found we have (x, yi) and (x, y^) and can proceed to show 
that the elliptic curves C\ and C2 have different ranks. 

6 Conclusions 

The paper gives an approach which may lead to a proof that the 
Birch and Swinnerton-Dyer conjecture fails. 
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